← Database
CVE-2021-42850
HIGH
CVSS: 8.8
Published: 2022-05-18
Modified: 2026-06-17
Description
A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access.
Affected Platforms
Lenovo A1 FirmwareLenovo T2 FirmwareLenovo X1Lenovo T2Pro FirmwareLenovo A1Lenovo T1 FirmwareLenovo T2ProLenovo T1Lenovo T2Lenovo X1 Firmware
Weakness Type
CWE-798, CWE-798